DE102018211421A1 - Recording system with independent supply - Google Patents

Abstract

Data storage module (10) for an event recorder (20) of a land vehicle for storing data of the event recorder (20) independent of a power failure of the event recorder (20), comprising a first interface (11) in order to receive data from the event recorder (20), a memory management device (12) for compressing and / or encrypting the data prior to storage, at least a first data store (13) for temporarily storing the data, an energy store (14) for supplying the data storage module (10) for data retention, a second interface (15) to read the stored data from the data storage module (10), the first data storage (13) comprising a volatile data storage (13), the data storage module (10) is executed while receiving a data failure Detect energy supply of the event recorder (20) and at this he detection to supply the data storage module (10) with energy from the energy storage (14) of the data storage module (10) for data retention, and the second interface (15) is standardized for data exchange with locations authorized for evaluating the data of the data storage module (10) , The invention further relates to an event recorder (20) for a land vehicle, a corresponding method for storing data from an event recorder of a land vehicle and a computer program product for an event recorder of a land vehicle for storing data from the event recorder (20).

Description

The invention relates to a data storage module according to claim 1 for an event recording device of a land vehicle for storing data of the event recording device regardless of a failure of a power supply to the event recording device. Furthermore, the invention relates to an event recording device according to claim 11 for a land vehicle. In addition, the invention relates to a method according to claim 13 for storing data of an event recording device of a land vehicle independently of a failure of a power supply of the event recording device. Furthermore, the invention relates to a computer program product according to claim 16 for an event recording device of a land vehicle for storing data independently of a failure of a power supply of the event recording device.

With the development of driver assistance systems and self-driving vehicles, central processing units are increasingly being used. The data from different sensors, in particular camera, radar, lidar, microphone, are read in and processed in these computing units. In this context, there is a requirement for systems that are able to store the data of the various sensors and the computing unit for a certain time before, during and after the event in the event of special events. Events are, for example, accidents, delicate or critical driving maneuvers. In particular, relevant data should be saved before an accident situation.

Accident data storage devices, referred to in the English event data recorder and hereinafter referred to as event recording devices, are known from the prior art. The following definitions and explanations apply to the entire subject matter of the invention. Event recording devices are used in particular to obtain more precise information about the accident situation. For this purpose, the event recording device permanently records or receives various signals available in the vehicle, such as speed, longitudinal and lateral acceleration, brake actuation, etc., and / or the data from sensors of driver assistance systems. The event recording device according to the invention is also designed to detect or receive the signals available in the vehicle. These signals and / or data are analyzed and temporarily stored for a given time interval. The recorded and / or received signals and / or data are continuously checked to see whether an accident situation is imminent or not. For this purpose, the accelerations that have occurred are generally evaluated and preferably compared with the data from the sensors, for example camera recordings of the traffic situation, an accident situation being detected, for example, when a defined acceleration limit value has been exceeded. If no accident is detected, the buffered data are usually deleted after some time and new, subsequently recorded or received data are buffered. In the case of an identified accident, however, the data of a defined period of time before and after the accident situation is permanently saved and is not automatically deleted. For example, an accident data storage device is shown in FIG DE 10 2014 109 726 A1 disclosed.

The challenge with event recorders is to still store data from before the accident occurred, even in the event of an accident, when the event recorder cannot be supplied with power. Since data from various sensors, in particular cameras, are also to be stored, the amounts of data are relatively large even when recording for a short period of time. Since camera data can also include personal characteristics, personal data is also recorded. As a storage medium in the vehicle environment, almost only flash-based storage is possible.

Since flash memories have a limited number of write cycles, permanent recording and overwriting until the event is problematic. The flash memory would have to be chosen so large that the number of write cycles is not exceeded. This leads to extremely large and expensive memories.

This is where the invention comes in. The invention has for its object to improve the storage of data from the event recorder, in particular with regard to the size of the memory, energy supply and data protection.

The object is achieved by a data storage module for an event recording device of a land vehicle for storing data of the event recording device regardless of a failure of a power supply to the event recording device with the features of claim 1. Furthermore, the object is achieved by an event recording device for a land vehicle with the features of claim 11 In addition, the object is achieved by a method for storing data of an event recording device of a land vehicle independently of a failure of a power supply to the event recording device with the features of claim 13. Furthermore, the object is achieved by a computer program product for a Event recording device of a land vehicle for storing data regardless of a power failure of the event recording device with the features of claim 16.

Further developments and advantageous refinements are specified in the subclaims, the description below and the figures.

The data storage module according to the invention is provided for an event recording device of a land vehicle. The data storage module is designed to store data of the event recording device regardless of a failure of a power supply of the event recording device. The data storage module includes a first interface to receive data from the event recorder. Furthermore, the data storage module comprises a memory management device in order to compress and / or encrypt the data prior to storage. In addition, the data storage module comprises at least a first data storage in order to store the data. Furthermore, the data storage module comprises an energy store for supplying the data storage module for data retention. The data storage module also includes a second interface in order to read out the stored data from the data storage module. The first data store comprises a volatile data store. The data storage module is configured to detect the loss of power to the event recorder while receiving the data. With this detection, the data storage module is supplied with energy from the energy storage of the data storage module for data retention. The second interface is standardized for data exchange with bodies authorized for evaluating the data of the data storage module.

A data storage device is an electronic component designed to store data. The data are stored in particular in or on the basis of electronic components, preferably semiconductor components. Electronic data storage is divided into volatile, called volatile in English, and non-volatile, called non-volatile in English, data storage.

Volatile data memories are generally subdivided into static data memories, in English static random-access memory, abbreviated SRAM, and dynamic data memories, in English dynamic random-access memory, abbreviated DRAM. The main difference lies in the way the data is stored. With SRAM, the data is stored in structures similar to flip-flops. Because of the large number of transistors, this leads to a relatively large chip area and thus to a high price. In return, SRAM keep their data as long as they are supplied with power. With DRAM, the data about loads is stored. For example, the storage element is a capacitor that is either charged or discharged. It is accessible via a transistor and either read out or written with new content. Since self-discharge takes place here and / or undesired leakage currents change the amount of charge stored in the capacitors, the data must be read and rewritten cyclically in order to obtain the data. This process is called refreshing. In the case of volatile data memories, data is lost if the data memory is not refreshed or if the supply voltage is switched off.

In the case of non-volatile data memories, data is retained for a long time without a supply voltage being applied. In particular, permanent memories, in which data once stored can no longer be changed, are non-volatile memories.

Compared to non-volatile data memories, volatile data memories advantageously comprise fast write cycles. However, the number of write cycles is relatively limited in the case of volatile data memories.

A module is an interchangeable element within an overall system. The module forms a closed functional unit. The data storage module according to the invention is an independent element of the event recording device for storing data. The data storage module is separable from the event recording device and is designed to function autonomously from the event recording device. In particular, the data storage module is energy self-sufficient.

Land vehicles are vehicles that move on land. For example, a passenger car is a land vehicle.

An interface is an independent mechanical and / or electronic component between at least two functional units, on which an exchange of logical quantities, for example data, or physical quantities, for example electrical signals, takes place, either only unidirectionally or bidirectionally. The exchange can be analog or digital. The exchange can also be wired or wireless. The first interface of the data storage module fulfills the function of an input interface via which data is received. The second interface of the data storage module fulfills the function of an output interface via which data is made available. Preferably the first and the second The interface is physically designed as an interface, i.e. as a mechanical or electronic component, which fulfills two functions: read in data and output data.

A memory management device is an electronic circuit for controlling and / or managing the data memory. The memory management device is in particular an integrated circuit, or IC for short, in English. This means that the circuit is applied to a thin, usually only a few square millimeters, small plate made of semiconductor material. If the storage management device compresses the data before storing, the required storage space can be kept small. In addition, the time for writing the compressed data can advantageously be kept short.

An energy store serves to supply electronic components in the event of failed or switched off overall systems. For example, a backup battery used in, for example, data storage or computer motherboards is an energy storage device. Another example of an energy store is a capacitive energy store. The energy storage makes the data storage module energy self-sufficient relative to the event recording device. The energy storage for the data storage module is independent of the energy supply of the event recording device. The energy supply to the event recording device generally comprises a relatively large amount of energy reserve in order to ensure a certain follow-up time for the event recording device, in particular for a computing unit of the event recording device that consumes a relatively large amount of energy. In contrast, the energy storage device of the data storage module can be kept comparatively small and inexpensive, since it only has to provide energy for maintaining the data and possibly for copying the data from a first volatile data storage device into a second non-volatile data storage device.

The data storage module detects the failure of the power supply to the event recording device, for example, when the event recording device is shut down.

Authorized bodies are entitled to data, especially personal data. of the event recorder. Natural persons can be identified with personal data. For example, location data, camera shots of road users or motor vehicle license plates are personal data. The authorized body is, for example, an official authority, for example a police authority. The second interface is, for example, a corresponding diagnostic interface, for example an OBD or USB interface known to the person skilled in the art.

By encrypting the data that is stored by the memory management device, the data can advantageously only be evaluated by the authorized body. Encryption means converting information in an understandable form into an incomprehensible form. The understandable form can only be recovered from the incomprehensible form using a secret key. Whole coherent information, for example words and / or sentences, is encrypted during coding. For example, an encryption code can be assigned that is only known to an authorized body. The memory management device is in particular designed to assign encryption codes for authorized locations with different data access rights depending on these data access rights. The memory management device is advantageously designed to manage encryption keys in order to manage different authorizations. Combinations of different encryption keys are preferably dependent on the consent of the respective authorized bodies. The memory management device is preferably designed to destroy the stored data in the event of unauthorized access. Encryption ensures that unauthorized persons cannot access the data, especially personal data.

The first data memory is preferably designed to maintain a data memory content when the data memory module is supplied with energy, the first data memory preferably being a static RAM data memory. In the case of a RAM data memory, in English random access memory, every memory cell of the data memory can be addressed directly, that is to say the data memory does not have to be read out in sequences or blocks. A static RAM data memory retains its memory content without running refresh cycles; a supply voltage is sufficient. The supply voltage is provided by the energy store of the data storage module. In combination with the energy store, the static RAM data store is a special form of a non-volatile RAM data store, in English non-volatile random-access memory, abbreviated NVRAM. The static RAM data memory is preferably designed to maintain the data at a minimal current. This means that the data is retained for a relatively long time even with small energy stores.

With the data storage module with a static RAM data storage, the data does not have to copied into a permanent data storage in order to remain stored permanently. Pure data retention in an SRAM data memory requires less energy than the permanent refresh when storing data in a DRAM data memory.

The memory management device is advantageously designed to manage encrypted and non-encrypted data and / or to provide memory areas of the data storage module as a function of authorization levels. By separating encrypted and non-encrypted memory areas, sensitive data that is then encrypted is protected. At the same time, effective data storage is provided, since non-encrypted memory areas are available for non-sensitive data and therefore there is no performance for encryption. Depending on an authorization level, the encrypted memory areas are made available.

The memory management device is preferably designed to correspondingly store the data of the event recording device as a function of a classification, preferably using means of artificial intelligence, of the data in personal and non-personal data. The classification is preferably carried out outside the data storage module. That is, the classified data is provided to the memory management device. Personal data is stored in such a way that personal characteristics of the personal data are anonymized, for example hidden, depending on the authorization levels of the authorized bodies evaluating the data of the data storage module. The anonymization ensures that, depending on the level of anonymization, no personal conclusions can subsequently be drawn from the data. If, for example, a pedestrian is recognized, the memory management device in the raw camera images of the pedestrian overwrites the face of the pedestrian and / or only outputs clothing of the pedestrian as gray values. Motor vehicle license plates are recognized and, for example, blackened. If the authorized body has the appropriate authorization, the memory management device is designed to switch off the masking of the personal characteristics. This prepares the data of the data storage module for each authorized location depending on the authorization level.

Artificial intelligence is a generic term for the automation of intelligent behavior. For example, an intelligent algorithm learns to react appropriately to new information. An artificial neural network, referred to as an artificial neural network, is an intelligent algorithm. An intelligent algorithm has to be learned to react appropriately to new information. The classification of the data into personal and non-personal data is advantageously carried out by means of artificial intelligence, for example using an artificial neural network. Artificial intelligence has learned to recognize personal characteristics in data. For example, the artificial neural network recognizes patterns of pedestrians and / or vehicles.

The memory management device particularly preferably comprises an application-specific integrated circuit. The application-specific integrated circuit comprises specific logic and preferably at least one processor. An application-specific integrated circuit, or ASIC for short, is an integrated circuit whose architecture is advantageously dependent on a specific problem, here data storage management, comprising compression, encryption and / or storage or output of the data the classification as described above. For this purpose, the application-specific integrated circuit comprises several logic blocks. Logic blocks include building blocks that provide elementary logic arrangements such as AND gates, OR gates, non-gates, non-AND gates or not-OR gates, and / or more complex logic circuits. Logic blocks can represent individual gates such as And, Or, etc. or complex blocks with their own function interfaces, for example compression functions, encryption functions, etc. For example, logic operations are implemented with circuits made of transistors. A processor is an electronic circuit that controls other electronic circuits in accordance with transmitted commands and preferably drives a process. The encryption and / or classification of the data can be controlled and managed particularly easily with a processor. The processor is preferably a microprocessor.

In a particularly advantageous embodiment of the invention, the data storage module comprises a second data storage in order to store the data permanently. The memory management device is designed to transfer the data from the first data memory to the second data memory in the event of a power failure of the event recording device. In the event of a power failure of the event recording device, the data storage module is preferably designed to maintain functions of the storage management device for the transmission of the data by means of the energy storage. This ensures minimal energy consumption. The transfer takes place by means of, for example, by means of internal interfaces between the memory management device and the first and second data memories. An example of a transmission is a copy of data. Relevant data are thus copied in particular from the first data memory into the second data memory when an event occurs and permanently stored in the second data memory. The first data storage device, the energy storage device of the data storage module and the second data storage device can advantageously be kept relatively small. It is essential that the energy store can be kept small, since energy only has to be kept available for the time of the copying process and only for the data storage module. The size of the data storage can easily reach the two to three-digit GB range. It is essential that, depending on the amount of data to be stored, the solution according to the invention is cheaper than a very large flash memory that is permanently overwritten.

With a flash memory of approx. 128 GB, for example, approx. 1 Mbyte / cycle can be saved with continuous overwriting, assuming a cycle time of 33 ms. If the same amount of data is stored for two minutes with an inventive data storage module in one event, for example 64 Mbyte RAM and 64 Mbyte Flash per event are sufficient. With 1GB Flash, for example, 16 events can already be recorded.

The second data memory preferably comprises a flash data memory or a non-volatile RAM data memory. Flash data storage devices are non-volatile data storage devices that are miniaturized and advantageously use relatively little energy. Non-volatile RAM data memories can be written to without prior deletion. Examples of non-volatile RAM data memories are ferroelectric RAMs, abbreviated FeRAMs, magnetoresistive RAMs, abbreviated MRAMs or phase-change RAMs, abbreviated PCRAMs, known to the person skilled in the art.

The first data memory is particularly preferably a DRAM data memory for temporary storage and the second data memory is a non-volatile data memory, for example a flash data memory, for final storage. In such an embodiment of the data storage module, an energy reserve is only required for copying the data. In particular, no energy reserve is required for data retention. After that, the data is stored for years.

The memory management device is preferably designed to compress the data before transmission into the first and / or into the second data memory. This allows the data storage to be kept relatively small.

The data storage module preferably comprises a housing. At least the second data memory and / or the memory management device are integrated in the housing, preferably as a multi-chip module. The first data memory is preferably integrated in the housing, preferably the multi-chip module. Multi-chip modules include several individual microchips that are housed in a common housing. From the outside, a multi-chip module looks like a chip, works like a chip and is used like a chip. The installation in a common housing makes access to internal interfaces more difficult. This makes abuse even more difficult. If the memory management device is implemented on the same die as the first and / or the second data memory, access to internal interfaces is very difficult. A die denotes an initially unhoused piece of a semiconductor wafer. A wafer is a semiconductor, usually a disk made of a semiconductor blank, which serves as a base plate for an electronic component.

The data storage module is advantageously designed as a plug-in module. The data storage module can be inserted into the event recording device as a plug-in module. The plug-in module is preferably designed in the form of a memory card. The plug-in module is at least partially enclosed by a fixed housing in order to access the interior of the data storage module, in particular the energy store, the first and the second data store, the memory management device and / or connections between these elements from external influences such as touches, impacts, moisture or unauthorized access protect. In the event that the data storage module comprises a non-volatile data storage, the energy storage for the data storage module can also be arranged outside the data storage module. The structure of the data storage module thus resembles that of a memory card. The plug-in module is preferably designed to be configured and made available by an authorized body. If the plug-in module is made available by an authorized body, functions can also be activated via the module.

The event recording device according to the invention for a land vehicle comprises first interfaces in order to receive data from environment detection sensors of the land vehicle. Environment detection sensors include, in particular, camera sensors, radar sensors, lidar sensors and / or sound transducers. Furthermore, the event recording device comprises a computing unit in order to evaluate the data and as a function of this evaluation To determine driving events. An arithmetic unit is an arithmetic unit that reads in, processes and outputs incoming information as a corresponding result. The computing unit is in particular a computing unit for controlling driver assistance functions and / or automated driving. This means that the computing unit is designed to detect or perceive the environment as a function of the data received from the environment detection sensors, referred to as perception in English. The computing unit is designed to derive vehicle control commands for partially or highly automated, that is to say autonomous, driving as a function of the detected or perceived environment. The computing unit is preferably designed to carry out the environment detection or perception and / or the determination of vehicle control commands by means of artificial intelligence. In an alternative embodiment of the invention, the event recording device is part of a driver assistance system. Furthermore, the event recording device comprises a data storage module according to the invention in order to store this data independently of a failure of a power supply to the event recording device. The data storage module is preferably designed to be plugged onto a printed circuit board of the event recording device. With such an event recording device, the recording of the data is advantageously independent of a failure of the event recording device. There are also the advantages of the independent data storage module according to the invention.

The computing unit is preferably designed to allow certain driver assistance functions and / or automated driving only when the data storage module is plugged in. The computing unit is thus designed to control driver assistance functions and / or automated driving, and the driver assistance functions and / or automated driving are enabled, in particular only enabled when the data storage module is plugged onto the circuit board of the event recording device. This aspect is advantageous, for example, for an insurance provider who can link his services to the condition of an attached data storage module.

By means of the method according to the invention, data of an event recording device of a land vehicle are stored independently of a failure of a power supply of the event recording device. The data are obtained in a first process step. In a second method step, the data are compressed and / or encrypted before being stored. In a third step, the data are stored in a first data memory. Depending on the failure of the energy supply to the event recording device, energy is provided in a fourth method step from an energy store separate from the event recording device for data retention. A data storage module according to the invention is used to carry out the method. This method improves the data storage in an event recording device of a land vehicle. The advantages of the data storage module according to the invention result.

The data are advantageously stored and / or output as a function of a classification, preferably using artificial intelligence, of the data in personal and non-personal data. The classification is preferably carried out outside the data storage module. Personal data is stored in such a way that personal characteristics of the personal data are anonymized, for example hidden, depending on the authorization levels of the authorized bodies evaluating the data of the data storage module. In particular, personal characteristics of the personal data are anonymized or hidden depending on the authorization levels of the authorized bodies evaluating the data. Personal data, for example contained in camera recordings of a driver assistance camera, is thus protected.

In the event of a power failure of the event recording device, the data are preferably transferred from the first data memory to a second data memory for permanent storage. A data storage module according to the invention is used for the transfer. The available storage space of the first and the second data storage module is thus optimally used.

The computer program product according to the invention for an event recording device of a land vehicle is provided for storing data regardless of a failure of a power supply to the event recording device. The computer program product is designed to be loaded into a memory of a computer, preferably an application-specific integrated circuit according to the invention. The computer program product comprises software code sections with which the method according to the invention can be carried out when the computer program product is running on the computer.

A program belongs to the software of a data processing system, for example a computing unit or a computer. Software is a Collective term for programs and related data. The complement to software is hardware. Hardware refers to the mechanical and electronic alignment of a data processing system.

Computer program products typically include a sequence of instructions that cause the hardware, when the program is loaded, to perform a specific procedure that leads to a specific result. When the program in question is used on a computer, the computer program product has a technical effect, namely the storage of data in the event of a power failure of the event recorder.

The computer program product according to the invention is platform independent. This means that it can be executed on any computing platform, in particular on one of a data storage module.

• 1 ein Ausführungsbeispiel eines erfindungsgemäßen Datenspeichermoduls,
• 2 ein weiteres Ausführungsbeispiel eines erfindungsgemäßen Datenspeichermoduls,
• 3 ein Ausführungsbeispiel eines aus dem Stand der Technik bekannten Ereign isaufzeichn u ngsgeräts,
• 4 ein Ausführungsbeispiel eines erfindungsgemäßen Ereignisaufzeichnungsgeräts und
• 5 eine schematische Darstellung eines Ausführungsbeispiels eines erfindungsgemäßen Verfahrens.

The invention is described in detail in the following figures using exemplary embodiments. Show it:

• 1 an embodiment of a data storage module according to the invention,
• 2 another embodiment of a data storage module according to the invention,
• 3 an embodiment of an event recording device known from the prior art,
• 4 an embodiment of an event recorder according to the invention and
• 5 is a schematic representation of an embodiment of a method according to the invention.

In the figures, the same reference symbols designate the same or functionally similar reference parts. For the sake of clarity, not all, but only the relevant reference parts are identified in the individual figures.

1 shows a data storage module 10 , The data storage module is designed, for example, as a plug-in module. The data storage module comprises a first interface 11 , The first interface 11 is executed, data from the camera, radar, lidar, ultrasound sensors and / or microphones from corresponding sensors of an event recording device 20 , and from this event recorder 20 receive evaluated data, in particular driving events. Via the first interface 11 In particular, the classification data and data on the traffic situation, which are made available by other units, are also obtained. Data on the traffic situation is provided, for example, by an infrastructure via Car-To-X communication, in particular to determine positions. These sensors are, in particular, sensors from driver assistance systems of land vehicles, in particular from partially automated to highly automated land vehicles. Via the first interface 11 receives a storage management device 12 of the data storage module 10 the data of the event recorder 20 ,

The storage management device 12 is designed as an application-specific integrated circuit ASIC. ASIC comprises several simple and / or complex logic blocks and possibly also a microprocessor to compress, encrypt, save and manage the data.

According to the the ASIC the over the interface 11 received data compressed and / or encrypted, the data in a first data memory 13 saved. In particular, the data in the first data memory 13 continuously filed and cyclically overwritten until a special event is detected. The first data store 13 is designed as a static RAM data memory SRAM.

An event that the data storage module 10 automatically detects, for example, a breakdown of a supply voltage of the event recording device 20 , In the event of such an event, an energy store takes over 14 of the data storage module 10 the energy supply of the data storage module 10 , The energy storage 14 is part of the data storage module 10 , The data storage module is therefore energy self-sufficient relative to the event recording device 20 and can save and manage data independently. The energy storage 14 is, for example, a capacitor or a backup battery.

The in the first data store 13 Stored data is transferred via a second interface 15 provided, in particular an appropriately authorized body. In the event that the data storage module 10 is designed as a plug-in module, is the second interface 15 integrated in the plug-in module. The second interface 15 is standardized for data exchange with the authorized body, for example in the form of a universal serial bus (USB) or universal flash storage (USF) interface. The second interface 15 is designed to transmit data rates at least in the Gbit / s range. The first interface 11 and the second interface 12 are physically a component, for example in the form of the USB interface. Data is read in and output via the USB interface.

2 shows a data storage module 10 with one compared to 1 additional second data storage 16 , The first data store here is a RAM data store. The RAM data memory is a volatile data memory with a high number of write cycles. The second data store 16 is a flash data storage. The storage manager 12 is executed when a breakdown of the supply voltage of the event recording device is detected 20 the data from the first data store 13 into the second data store 16 to copy. Here the data can be compressed. The data is preferred as soon as it is written to the first data memory 13 compressed. In the second data store 16 the data is saved permanently. Via the interface 15 will be in the second data store 16 stored data provided, especially for an appropriately authorized body.

The storage manager 12 and the second data store 16 as well as all internal interfaces between the memory management device 16 and the second data store 16 are in a common housing 17 housed as a multi-chip module. This makes access to the data and internal interfaces and the data storage module difficult 10 especially protected against hacker attacks. In a further embodiment, the first data memory is also 13 in the housing 17 accommodated.

3 shows an event recorder known from the prior art 20 , The event recorder 20 includes a circuit board 29 , On the circuit board 29 is an energy supply 24 for the event recorder 20 , a non-volatile memory 26 in the form of a flash data store, a data store 23 in the form of a RAM data memory and a computing unit 22 arranged. In addition to energy for storing the data, the energy supply also needs energy for the computing unit 22 provide. The computing unit 22 includes internal interfaces to the non-volatile memory 26 and the data storage 23 , Via a first interface 21 receives the computing unit 22 Data from sensors, for example camera shots. Via an interface 28 receives the computing unit 22 Data generated in the land vehicle, for example values for speed and / or acceleration. the interface 28 is for example a CAN bus. The computing unit determines the data from the sensors and the data generated in the land vehicle 22 a special driving event, for example an impending accident.

4 shows an event recording device according to the invention 20 with the data storage module 10 as in 2 shown. The hatching is intended to clarify that the data storage module 10 is an independent module and from the event recorder 20 is separable while maintaining its functions.

5 shows schematically the inventive method. In one step V1 data from sensors of a driver assistance system and / or vehicle internal data via the first interface 11 receive. In one step v2a the data is stored by the memory management device prior to storage 12 compressed and / or encrypted. In one step V3 the data in the first data store 13 saved. In one step V 2b the data are stored in personal and non-personal data depending on a classification, preferably using artificial intelligence. Personal characteristics of the personal data are processed in one step v2c depending on the authorization levels of the authorized agencies evaluating the data anonymized or hidden. The procedural steps V 2b and v2c are optional. Depending on the failure of the energy supply 24 of the event recorder 20 is in one step v4a Energy from that from the event recorder 20 separate energy storage 14 of the data storage module 10 provided for data retention. In the event of a power failure 24 of the event recorder 20 are in one step 4b the data from the first data store 13 from the memory management device into the second data memory 16 transferred for permanent storage, the data storage module for the transfer 10 is used.

Also within the scope of the invention is software which, loaded into a memory of a computer program product, carries out the steps of the method.

Ideally, the data storage module only includes the functions and / or arithmetic operations that must necessarily run on it or that can simply be mapped in logic. These functions and / or arithmetic operations are encryption and compression. The clear goal is to keep the energy rich small. In particular, this means that the functions must be minimized after the supply has been cut off in order to minimize power consumption. Ideally, only data is then copied.

It is also within the scope of the invention to trigger the storage of events, in particular independently of a breakdown of the supply voltage.

LIST OF REFERENCE NUMBERS

10

Data storage module

11

first interface

12

Storage management device

13

first data store

14

energy storage

15

second interface

16

second data storage

17

casing

20

Event recorder

21

first interfaces

22

computer unit

23

data storage

24

power supply

26

non-volatile memory

28

interface

29

circuit board

R.A.M.

random access memory

SRAM

static RAM

Flash

flash memory

ASIC

application specific integrated circuit

V1 V4b

steps

QUOTES INCLUDE IN THE DESCRIPTION

This list of documents listed by the applicant has been generated automatically and is only included for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Patent literature cited

• DE 102014109726 A1 [0003]

Claims (16)

Data storage module (10) for an event recording device (20) of a land vehicle for storing data of the event recording device (20) regardless of a failure of a power supply (24) of the event recording device (20) A first interface (11) in order to receive data from the event recording device (20), A memory management device (12) for compressing and / or encrypting the data prior to storage, At least a first data memory (13) in order to store the data, • an energy store (14) for supplying the data storage module (10) for data retention, • a second interface (15) to read the stored data from the data storage module (10), wherein • the first data store (13) comprises a volatile data store (13), • the data storage module (10) is designed to recognize the failure of the energy supply (24) of the event recording device (20) while receiving the data and upon this detection the data storage module (10) with energy from the energy storage (14) of the data storage module (10) supply for data retention, and • The second interface (15) is standardized for a data exchange with bodies authorized for evaluating the data of the data storage module (10). Data storage module (10) after Claim 1 , wherein the first data memory (13) is designed to maintain a data memory content when the data memory module (10) is supplied with power, the first data memory (13) preferably being a static RAM data memory (SRAM). Data storage module after Claim 1 or 2 The memory management device (12) is designed to manage encrypted and non-encrypted data and / or to provide memory areas of the data storage module (10) depending on authorization levels. Data storage module (10) according to one of the Claims 1 to 3 , wherein the memory management device (12) is designed to • store the data of the event recording device (20) depending on a classification, preferably by means of artificial intelligence, of the data in personal and non-personal data and • personal characteristics of the personal data in dependence to anonymize the authorization levels of the authorized bodies evaluating the data of the data storage module (10). Data storage module (10) according to one of the preceding claims, wherein the memory management device (12) comprises an application-specific integrated circuit (ASIC), the application-specific integrated circuit (ASIC) comprising logic blocks and preferably at least one processor. Data storage module (10) according to one of the preceding claims, comprising • a second data memory (16) to permanently store the data, whereby • The memory management device (12) executed, in the event of a power failure (24) of the event recording device (20) to transfer the data from the first data memory (13) to the second data memory (16), wherein the power supply (24) of the Event recording device (20), the data storage module (10) is preferably designed to maintain functions of the storage management device (12) for the transmission of the data by means of the energy storage device (14). Data storage module (10) after Claim 6 , wherein the second data memory comprises a flash data memory (flash) or a non-volatile RAM data memory. Data storage module (10) after Claim 6 or 7 , wherein the memory management device (12) is designed to compress the data before transmission into the first data memory (13) and / or into the second data memory (16). Data storage module (10) according to one of the Claims 6 to 8th comprising a housing (17), at least the second data memory (16) and / or the memory management device (12) being integrated in the housing (17), preferably as a multi-chip module, preferably the first data memory (13) is integrated in the housing (17), preferably the multi-chip module. Data storage module (10) according to one of the preceding claims, designed as a plug-in module. Event recording device (20) for a land vehicle comprising • first interfaces (21) to receive data from environment detection sensors of the land vehicle, • a computing unit (22) to evaluate the data and to determine driving events as a function of this evaluation, and • a data storage module (10 ) according to one of the Claims 1 to 10 in order to store this data regardless of a failure of a power supply (24) of the event recording device (20), the data storage module (10) preferably is designed to be plugged onto a printed circuit board (29) of the event recording device (20). Event recorder (20) after Claim 11 The computing unit (22) is designed to control driver assistance functions and / or automated driving and the driver assistance functions and / or automated driving are activated when the data storage module (10) is plugged onto the circuit board (29) of the event recording device (20). A method for storing data from an event recording device (20) of a land vehicle, regardless of a failure of a power supply (24) of the event recording device (20), comprising the method steps • obtaining the data (V1), • compressing and / or encrypting the data before storing (V2a ), • storing the data in a first data memory (13) (V3), • depending on the failure of the energy supply (24) of the event recording device (20) providing energy from a separate from the event recording device (20) energy storage (14) for data retention (V4a), a data storage module (10) according to one of the Claims 1 to 5 is used. Procedure according to Claim 13 , where the data is stored depending on a classification, preferably using artificial intelligence, into personal and non-personal data (V2b) and personal characteristics of the personal data depending on authorization levels are hidden from the data analysis authorities (V2c). Procedure according to Claim 13 or 14 , If the energy supply (24) of the event recording device (20) fails, the data are transferred from the first data memory (13) to a second data memory (16) for permanent storage (V4b), a data storage module (10) being used for the transfer one of the Claims 6 to 10 is used. Computer program product for an event recorder (20) of a land vehicle for storing data of the event recorder (20), regardless of a failure of a power supply (24) of the event recorder (20), into a memory of a computer, preferably according to an application-specific integrated circuit (ASIC) Claim 5 to be loaded, and comprising software code sections with which a method according to one of the Claims 13 to 15 is executable when the computer program product is running on the computer.

Images